What is everyone's feeling on where to run a remote access VPN server. I'm guessing that if you have an SRM router then you also have a DSM NAS, but less likely the other way around.
Both VPN Server on DSM and VPN Plus on SRM support OpenVPN and L2TP/IPsec (let's forget PPTP). So unless SSL-VPN is needed there are two options for where to deploy the sever.
I moved from DSM to SRM simply to move the remote access away from being directly connected to the NAS and it's content. There is then the possibility to use DSM's firewall to control access from SRM's VPN users, should this be needed. When using DSM VPN Server the DSM firewall may have done the same filtering to protect local content, but it wasn't obviously so.
I suppose if VPN users only need access to the DSM content then use it, and don't allow VPNs to access the LAN. But otherwise, and my preference, is to separate the infrastructure device functions from server functions.
Both VPN Server on DSM and VPN Plus on SRM support OpenVPN and L2TP/IPsec (let's forget PPTP). So unless SSL-VPN is needed there are two options for where to deploy the sever.
I moved from DSM to SRM simply to move the remote access away from being directly connected to the NAS and it's content. There is then the possibility to use DSM's firewall to control access from SRM's VPN users, should this be needed. When using DSM VPN Server the DSM firewall may have done the same filtering to protect local content, but it wasn't obviously so.
I suppose if VPN users only need access to the DSM content then use it, and don't allow VPNs to access the LAN. But otherwise, and my preference, is to separate the infrastructure device functions from server functions.